Security & Testing Claude 技能

Verification Before Completion

Enforces a strict evidence-based workflow that requires running verification commands before claiming any task is finished.

Defense-in-Depth Validation

Implements a multi-layered validation strategy to make software bugs structurally impossible by verifying data at every system boundary.

Database Security Scanner

Performs comprehensive security audits and vulnerability assessments for PostgreSQL and MySQL databases using OWASP guidelines.

Testing Anti-Patterns

Identifies and prevents common software testing pitfalls to ensure test suites verify real behavior rather than mock implementation.

Strict Test-Driven Development (TDD)

Enforces a rigorous Red-Green-Refactor workflow by requiring failing tests before any production code is written.

Condition-Based Waiting

Eliminates flaky tests and race conditions by replacing arbitrary timeouts with smart, asynchronous condition polling.

Skill Testing with Subagents

Applies Test-Driven Development (TDD) principles to AI process documentation to ensure skills resist rationalization under pressure.

Condition-Based Waiting

Eliminates flaky tests and race conditions by replacing arbitrary timeouts with intelligent state polling.

Skill Testing with Subagents

Applies Test-Driven Development (TDD) principles to AI skills to ensure they remain effective under pressure and resist rationalization.

Security Misconfiguration Finder

Audits infrastructure-as-code and application configurations to proactively identify and remediate security vulnerabilities.

Verification Before Completion

Enforces rigorous, evidence-based verification protocols before any task is claimed as complete or submitted for review.

Test-Driven Development (TDD) Superpowers

Enforces a strict Red-Green-Refactor cycle to ensure all code is verified by failing tests before implementation.

Performance Test Suite

Automates the design, execution, and analysis of load, stress, and endurance tests to identify system bottlenecks and optimize application performance.

Mutation Test Runner

Validates test suite quality by introducing code mutations and measuring the detection effectiveness of existing test cases.

Test Doubles Generator

Automates the creation of mocks, stubs, spies, and fakes to isolate dependencies and accelerate unit testing workflows.

CSRF Protection Validator

Audits web application endpoints and cookie configurations to detect and remediate Cross-Site Request Forgery (CSRF) vulnerabilities.

API Testing Mastery

Implements comprehensive API testing strategies, automation workflows, and Postman MCP integrations for reliable backend services.

Testing Strategy Specialist

Designs and implements comprehensive testing strategies to ensure codebase quality and reliability before the code review process.

Express API Testing Patterns

Implements comprehensive testing strategies for Express.js applications including unit, integration, and middleware tests.

CA Django Linters

Automates Python code formatting and linting for Django projects using Ruff to ensure consistent code quality and style compliance.

Coverage Loop

Increases test coverage iteratively by identifying code gaps and writing targeted tests until a specific percentage is achieved.

Swift Testing Expert

Implements modern Swift Testing patterns using macros, assertions, and advanced test organization for iOS development.

Access Control Auditor

Audits access control configurations to identify security vulnerabilities, misconfigurations, and privilege escalation risks in IAM policies and network ACLs.

Input Validation Scanner

Scans source code to detect and mitigate input validation vulnerabilities like SQL injection and XSS.

Security Headers Analyzer

Analyzes website HTTP security headers to identify vulnerabilities and provide actionable improvement recommendations.

Testing Guidelines

Enforces rigorous testing standards including strict assertions, minimal mocking, and clear naming conventions for high-quality test suites.

Guardrails & Safety Instrumentation

Implements comprehensive input and output safety checks to secure AI agent interactions and protect sensitive data.

Precommit Build Validator

Validates code changes by running precommit checks, automated builds, and battery-aware test suites.

Automated Code Verification

Automates code verification by suggesting and running context-aware tests, lints, and syntax checks after every modification.

CTO Codebase Audit

Performs comprehensive, expert-level assessments of software architecture and code quality to identify technical risks and scaling opportunities.